Security update for glibc

This update for glibc fixes the following issues: CVE-2026-6368: invalid free via wordexp WRDEAPPEND rollback bsc1274726. CVE-2026-6791: stack overflow in wordexp tilde expansion bsc1274723. CVE-2026-18374: heap buffer overflow in the fopen ccs extension bsc1277262. CVE-2026-19499: buffer overflo...

SUSE-SU-2026:23830-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDEAPPEND rollback bsc1274726. - CVE-2026-6791: stack overflow in wordexp tilde expansion bsc1274723. - CVE-2026-18374: heap buffer overflow in the fopen ccs extension bsc1277262. - CVE-2026-19499: buffer...

CVE-2026-18374

Passing an effectively empty string to the ,ccs= syntax extension of the mode argument in the fopen function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string input to the function is attacker controlled. This usage pattern is not seen in...

UBUNTU-CVE-2026-18374

Passing an effectively empty string to the ,ccs= syntax extension of the mode argument in the fopen function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string input to the function is attacker controlled. This usage pattern is not seen in...

CVE-2026-18374

Passing an effectively empty string to the ,ccs= syntax extension of the mode argument in the fopen function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string input to the function is attacker controlled. This usage pattern is not seen in...

CVE-2026-18374

CVE-2026-18374 affects the GNU C Library (glibc) version 2.45 or earlier . The vulnerability is a heap buffer overflow in the fopen function triggered by passing an effectively empty string to the ,ccs= syntax extension of the mode argument, when that input is attacker-controlled. The CVSS 3.1 sc...